That’s a bit of a sticking point. You just have to trust that user to not up their quotas. I have set up one trusted user like this, and it hasn’t been a problem.
What is it that they need access to? I can only guess it’s one-click installs, or perhaps mail account administration.